CVE-2023-1672
Fixed in a distro release EPSS <1%CVSS 5.3
A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.
Products: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux:8 | tang | 7-8.el8 |
| AlmaLinux:9 | tang | 14-2.el9 |
| Debian:10 | tang | 7-1+deb10u2 |
| Debian:12 | tang | 11-2+deb12u1 |
| Debian:13 | tang | 14-1 |
| Debian:14 | tang | 14-1 |
| Red Hat:enterprise_linux:8 | tang | 0:7-8.el8 |
| Red Hat:enterprise_linux:8 | tang-debuginfo | 0:7-8.el8 |
| Red Hat:enterprise_linux:8 | tang-debugsource | 0:7-8.el8 |
| Red Hat:enterprise_linux:9 | tang | 0:14-2.el9 |
| Red Hat:enterprise_linux:9 | tang-debuginfo | 0:14-2.el9 |
| Red Hat:enterprise_linux:9 | tang-debugsource | 0:14-2.el9 |
| Ubuntu:20.04:LTS | tang | 7-1ubuntu0.2 |
| Ubuntu:22.04:LTS | tang | 11-1ubuntu0.1 |
| Ubuntu:Pro:18.04:LTS | tang | 6-1ubuntu0.1~esm1 |